Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
File: PsY-XbBDXC0-dKayitPZww1qjO4.mft (raw, json)
Hash identifier: 858Bwu2HYfWrnHkRYNMjw+EzV/mQuzoaIr3B88KX9QY=
Subject key identifier: 85:03:C5:3C:CA:C1:1B:08:EF:F8:66:23:BD:37:C1:FD:6F:92:5C:2E
Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Certificate serial: 019FA184879EC90732D6F346A2467AB186F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
Manifest number: 11DE
Signing time: Mon 27 Jul 2026 03:00:44 +0000
Manifest this update: Mon 27 Jul 2026 03:00:44 +0000
Manifest next update: Tue 28 Jul 2026 03:00:44 +0000
Files and hashes: 1: PsY-XbBDXC0-dKayitPZww1qjO4.crl (hash: tRgyUhNeiThRKs/bkGKYKpAfF+7k+W9E+Y48x1Igeis=)
2: e4Y82jz5m9Po29WmrpJsedcmzmk.roa (hash: uEEEYOKhA29NBvJQq3WwP47mr+GKJzQ+1OrC0QbpDj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:87:9e:c9:07:32:d6:f3:46:a2:46:7a:b1:86:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Validity
Not Before: Jul 27 03:00:44 2026 GMT
Not After : Jul 28 03:00:44 2026 GMT
Subject: CN=8503c53ccac11b08eff86623bd37c1fd6f925c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:6d:ab:be:03:ef:6d:e7:ed:7a:75:6f:fa:
9f:d0:fc:f9:cc:cd:9a:40:65:a7:5e:ea:95:87:e0:
3d:2f:ff:33:68:69:18:a3:b2:59:db:a5:c3:d3:d7:
b9:dd:c6:6f:17:6d:2f:e2:21:59:b4:1e:c1:bf:e9:
22:1c:6b:62:bb:f9:cc:7c:7a:bf:cd:03:7e:9f:50:
c4:fb:e3:86:32:61:29:e8:75:c4:53:61:58:10:e3:
2e:b2:c0:5c:3d:d4:a7:b5:5d:fc:7e:70:57:3e:93:
d9:2e:39:47:76:e5:9a:9c:84:0e:36:7d:c6:95:28:
92:42:88:64:66:35:fc:f0:33:65:f4:0c:58:ca:89:
4c:79:5b:bc:b0:27:6a:44:fc:09:91:47:06:75:42:
fd:9f:9c:17:68:87:47:c7:d4:15:80:b4:f6:7b:ad:
81:59:b6:cd:88:4f:a9:2e:5d:bd:32:9d:da:8b:9b:
65:bd:50:2d:41:9b:e5:bf:11:d1:cf:21:9b:17:1c:
5a:68:54:c1:66:7f:31:99:ac:a9:20:b5:a0:d4:bd:
1e:b4:35:48:3f:5e:b6:ab:94:9e:f1:ca:fc:57:19:
dd:95:3a:d4:e1:e1:5a:ff:c1:43:c9:ab:de:a3:b3:
97:3a:a6:37:8b:44:63:06:75:3f:79:f9:7f:08:f1:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:03:C5:3C:CA:C1:1B:08:EF:F8:66:23:BD:37:C1:FD:6F:92:5C:2E
X509v3 Authority Key Identifier:
keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:74:2e:36:3c:66:70:be:8a:35:60:ae:28:20:84:4d:2c:f7:
33:c9:97:ae:8d:fd:ac:28:a0:06:6a:d8:8f:79:90:90:c8:bd:
0c:e7:4e:8c:e5:4f:ab:ed:80:b3:0f:72:2b:87:db:e3:2f:fa:
e1:0c:af:f1:5e:99:42:c1:bf:ed:1b:ea:44:2d:46:b8:93:55:
84:1d:ac:12:59:f9:7e:84:b5:df:5f:00:54:2e:31:e6:04:a3:
9d:59:ed:bf:93:a6:43:06:d9:c2:6d:19:55:49:d6:01:97:d6:
95:59:51:29:a7:ae:aa:48:06:79:a8:e5:0c:a6:16:91:d4:6f:
b4:b3:ed:05:6b:8c:92:40:38:1e:8f:45:4c:31:e4:14:85:9c:
95:6e:d4:f8:c3:5b:d5:60:03:1c:84:61:f7:c5:60:75:7c:d8:
e0:86:c2:20:95:f4:c1:ac:54:dc:bf:79:12:2c:ef:f4:da:be:
87:29:8b:c7:c3:bd:6d:d9:18:c2:d4:66:58:df:24:67:76:95:
2c:6b:ed:a4:44:1a:61:26:f7:fe:52:6a:ad:0a:dd:4b:f7:9b:
e1:4c:f9:e1:66:12:1a:1c:96:61:29:79:22:45:53:0a:21:9f:
8b:9d:8b:36:30:5c:95:ac:bb:89:9f:d9:08:29:2d:9a:44:ae:
85:e3:23:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:37:52 2026 by rpki-client